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Cloud computing provides advantages, like flexibly of space, security, cost 
optimization, accessibility from any remote location. Because of this factor 
cloud computing is emerging as in primary data storage for individuals as 
well as organisations. At the same time, privacy preservation is an also a 
significant aspect of cloud computing. In regrades to privacy preservation, 
association rule mining was proposed by previous researches to protect the 
privacy of users. However, the algorithm involves creation of fake 
transaction and this algorithm also fails to maintain the privacy of data 
frequency. In this research an apriori algorithm is proposed to enhance the 
privacy of encrypted data. The proposed algorithm is integrated with 
elagmal cryptography and it does not require fake transactions. In this way, 
the proposed algorithm improves the data protection as well as query privacy 
and it hides data frequency. Result analysis shows that the proposed 
algorithm improves the privacy as compared to previously proposed 


association rule mining and the algorithm also shows 3% to 5% 
improvement in performance when compared to other existing algorithms. 
This performance analysis with varying number of the data and fake 
transactions shows that the proposed algorithm doesn’t require fake 
transactions, like data privacy association rule mining. 
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1. INTRODUCTION 

Cloud computing provides a set of the advantages, like flexibly of space, security, cost optimization, 
and accessibility from any remote location. In cloud computing a database can be outsourced and security 
and remote access provides an incredible benefit to end users. However, with the advancement in cloud 
security, privacy preservation is being focused on securing the privacy of personal and organizational level 
outsourced data. As the private data may contain important personal information like credentials and private 
information, it should be protected from other users, including administrator, system level users and cloud 
server itself. Hence database encryption is a mandatory step which needs to be done before database 
outsourcing. One of the most popular data mining techniques (DM) for determining the relationships between 
entities in huge data sets is the association rule mining. As the database size is large and it may contain useful 
hidden information, associate rule mining is used to extract the important relational information from the 
database. Although associate rule mining extracts useful information but at the same time it compromises the 
privacy of the stored data. To avoid this issue a new privacy preserving associate rule mining was developed 
which finds the hidden information of data and protect the privacy of datasets. In regrades to privacy 
preservation, association rule mining was proposed by previous researchers in order to protect user privacy 
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[1]-[6]. Results show that the privacy preservation scheme that has been proposed in this research manages 
to protect the privacy, but those algorithms involve creation of fake transaction and the algorithm also fails to 
maintain the privacy related to data frequency. By using data frequency, while preforming query processing, 
private information can be obtained even after performing data encryption and query encryption. In this 
research, a privacy persevering model for associate rule mining is used to access the encrypted dataset in the 
cloud servers. In this research, an apriori algorithm is used in the associate rule mining to find the 
relationship among different tuples. It is the mostly preferred algorithm for frequent dataset mining [7]-[9]. 
A plain text comparison test is carried out inorder to check whether two cipher texts are similar. In this way, 
the proposed algorithm improves the data protection as well as query privacy and it hides data frequency. 

To improve the security and privacy related concern in cloud computing, a privacy preserving 
associate rule mining was proposed. For this problem Wong initially proposed a one tuple to many tuples 
relational mapping in the cloud datasets, an advantage of this mapping was the converted transaction without 
deterministic approach. But the major disadvantage of this approach is easily distinguishable fake item from 
original datasets as the probability of both of the transaction types are the same [10]. In the paper, Giannotti, 
et al. [11] proposed a k anonymity-based association rule mining algorithm. The proposed algorithm is based 
on fake transaction, it adds multiple fake datasets in existing datasets and hence, the frequency of every item 
becomes k-1. The drawback of this algorithm is if the fake transactions are known to the attacker then the 
original datasets can be easily extracted. This algorithm also increases the computational time as there is an 
extra work to roll out the frequency of fake transaction. 

Yi at al. [2] suggested an associate rule mining based on the k anonymity but it focuses on the 
encrypted dataset. El-gamal cryptography technique has been used, which provides an advantage of query 
protection with data protection. But this algorithm is also relying on the fake transaction and hence additional 
computation is required to insert fake encrypted transactions. In this algorithm frequency calculation is 
carried out using conditional gates which are based on the cipher text and its binary array. However, the data 
frequency of query processing is not encrypted in this algorithm; hence if attacker is aware of the data 
frequency then original datasets can be easily exposed. In the paper, Saravanan [12] an association rule 
mining (ARM) method has been proposed, Rob frugal algorithm and frequent item-set rule mining (F-item 
set RM) has been utilized for identifying fake or reiterate rules in the mining process. The method relies on 
cryptography is prioritized for database privacy protection. Privacy preserving data mining (PPDM) is a 
solution for data mining privacy risks. Through a centralized database, a connection is established between 
the cloud and the data owner, and the unprocessed data is processed using the cloud's solutions. To protect 
data privacy, a holomorphic encryption technique and a secure comparison scheme are utilized. In the paper, 
Jabeen et al. [13] improved secured association rule mining (ISARM) is proposed for vertical and horizontal 
database segmentation. Then, for privacy assurance, k-Anonymization approaches such as generalization and 
suppression depend anonymization are used. Finally, the diffie-hellman encryption technique (DHET) is 
proposed to protect sensitive data and allow storage service providers to operate with encrypted data. The 
diffie-hellman method (DHM) is used to improve the system's overall quality by generating safe keys, 
ensuring that the actual data is protected more effectively. The newly presented approach is tested in a Java 
simulation environment, which shows that it achieves both privacy and security. In the paper, Kumar et al. 
[14] the principles of DM in cloud computing (CC) and data security are discussed. The present level of 
cloud computing security has been explored, as well as data privacy analysis, security audits, data 
monitoring, and other cloud computing security problems. Some difficulties have been partially solved in 
recent data protection studies on security and privacy challenges in CC. Users can extract large hidden 
predictive information from a virtually integrated data warehouse using cloud computing, saving storage and 
infrastructure costs. 

In the paper, Priyadarsini et al. [15] employed ARM as information mining approach. They 
employed the apriori formula in particular for ARM. It's been established that the first apriori formula was 
created for sequential calculation; therefore, utilizing it for the parallel processing doesn't seem like good 
idea. As a result, they tweaked the apriori formula (FP Growth) to make it more suitable for parallel 
computing. For cloud computing, they used the CloudSim machine. In the paper, Duc [16] from ARM to 
classification to clustering, there have been a number of secure methods. Randomization and safe multi-party 
computation are the two main methodologies in PPDM. The former uses statistical features to disguise 
sensitive data by adding noise to the underlying values. To prevent adversaries from seeing original data, the 
latter employs encryption techniques. The methods they offer in their thesis are based on the second 
approach. To compute the scalar product for several parties, we first introduce CSSP, an efficient privacy- 
preserving protocol. Thanks to homomorphic multiplicative cryptosystems, the protocol is developed 
employing caching techniques. CSSP beats prior work in terms of running time while keeping the same level 
of security when used to association rule mining challenges. Because data is updated on a regular basis, 
protocols must adapt to the changes. We suggest an incremental PPDMP for ARM with this goal in mind, 
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allowing participants to conduct mining activities on updated data rather than the complete data set. INCRE 
is a protocol that scans outdated databases only once, hence lowering computation overheads. They also 
performed tests to demonstrate the protocol's superiority to existing approaches. In the paper, Lakshmi and 
Rani [17] a model is provided that uses a sign-rely secure sum cryptography approach to find global 
association rules with trustworthy parties while maintaining the privacy of individual's data while it is 
dispersed in a horizontal manner across multiple locations fragment. Data may be partitioned in a variety of 
ways, including horizontal, vertical, and hybrid partitioning. Each fragment of data in horizontal partitioning 
consists of a sub-set of the records of a relation R, whereas each fragment of data in vertical partitioning 
consists of a sub-set of the characteristics of a relation R. Mixed fragmentation is another partitioning 
approach, in which data is partitioned in a horizontal manner and after that, every partitioned piece is further 
divided. 

In the paper, Khurana and Bahl [18] association rule mining has been employed as a data mining 
technique in the dissertation. For association rule mining, they used the apriori method in particular. Because 
the original apriori method was created for sequential calculation, it does not appear to be a smart idea to use 
it for parallel computation. As a result, they tweaked the apriori algorithm (FP Growth) to make it more 
suitable for parallel computing. For cloud computing, they used CloudSim Simulator. In the paper, Redekar 
and Honwadkar [19] investigates the topic of outsourcing association rule mining (ARM) tasks in the cloud 
environment within corporate privacy-preserving frameworks. The study proposed a new approach that 
ensures that every converted item from data owner to server is interchangeable when compared to attackers' 
background information. On an enormously large and genuine transaction database that represents the entire 
system, their solutions are scalable, effective, and safeguard privacy. This method also recommends using the 
cloud to enable privacy-preserving mining. In a classical paradigm, it is assumed that the enemy educates the 
region of items and their exact occurrence and can use this information to recognize cipher items and cipher 
item sets. In the paper, Gai et al. [20] focused on the privacy importance of big data (BD) and take up cloud 
computing implementations. Suggest a new data encryption method, which is called dynamic data encryption 
strategy (D2ES). Our suggested method aims to eclecticly encrypt data and utilize privacy classification 
methods under thoroughness constraints. This method is prepared to maximize the privacy protection domain 
through utilizing an eclectic encryption strategy within the requested execution time (ET) requests. 

The achievement of D2ES has been estimated in our experiences, which provides the evidence of 
the privacy increase. In the paper, Park et al. [21] suggeste a privacy-preserving reinforcement learning 
(PPRL) architecture for the cloud computing platform. For fully homomorphic encryption, the suggested 
framework uses a cryptosystem based on learning with errors (LWE) (FHE). The suggested PPRL 
framework's performance is analyzed and evaluated in a diversity of cloud computing-based on intelligent 
service scenarios. Rajput and Raman [22] suggest a new cloud based privacy-preserving technique for image 
color improves. Unlike other color correction methods, where the colors of the test image are treated in the 
plain domain with visible image contents, we suggest that color correcting operations be performed over the 
cloud in an encrypted domain. As a consequence, superior results are accomplished along with entire privacy 
confirmation. Furthermore, we suggest a block-based on image encryption approach based on the logistic- 
tent system and the ElGamal cryptosystem. As a result, when compared to the naive technique, the size of the 
encrypted image is greatly reduced. The suggested approach is determined to be highly effective when 
compared to state-of-the-art schemes, according to experimental results. A challenge response game model is 
used to demonstrate the suggested approach's security strength. 

In the paper, Zhou et al. [23] we look into ways to deliver multiple granular information views for 
diverse users. Based on a Galois connection, our technique first creates the association between the keywords 
and data files. Then we employ data retrieval indexes with changeable thresholds, which allow for granular 
data retrieval by altering the threshold for various users. We study the issue of privacy-preserving granular 
data retrieval service (PPGDRS) on cloud where, we present a differentially privacy release approach rely on 
the suggested index technique to prevent privacy leak. We illustrate the proposed method's privacy- 
preserving guarantee, as well as the validity of the suggested mechanism through comprehensive tests. In the 
paper, Rong et al. [24] suggested approach k-nearest neighbor (KNN) computation over the databases 
distributed through multiple cloud environments for privacy-preserving. Unluckily, existent secure 
outsourcing protocols are either restrictive to a single key setting or perfectly effectual because of repeated 
client-to-server interactions, making it unpractical for wide implementation. To address these issues, we 
suggeste a set of secure building blocks and outsourced cooperative KNN protocol. Theoretic analyses 
illustrates that under the semi-honest scenario, our solution not only protects the privacy of distributed 
databases and KNN queries, but also hides access patterns. When compared to previous methodologies, the 
experimental evaluation shows significant efficiency gains. In regrades to privacy preservation, association 
rule mining was proposed by previous researches to protect the privacy of users. The results shows that the 
privacy preservation schema proposed in research, manage to protect the privacy but those algorithms 
involve creation of fake transaction and the algorithm also fails to maintain the privacy related to data 
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frequency. By using the data frequency, while preforming query processing, private information can be 
obtained even after performing data encryption and query encryption. In the presented study apriori 
algorithm is suggested to enhance the privacy of encrypted data. The suggested algorithm has been integrated 
with elagmal cryptography and it does not require fake transactions. The suggested architecture and flow 
chart of the apriori algorithm and Elgamal encryption algorithm are provided in section 2. The perforamance 
analysis will be completely indicated in section 3. Lastly, section 4 provides the conclusions. 


2. PROPOSED ARCHITECTURE 

Current cloud systems consist of data mining protocol in stored dataset which is either partially 
honest or has an access to personal dataset [25]. Even though a security protocol has been developed to 
protect the cloud storage from outsider attacks, privacy preservation inside the cloud is equally essential. In 
the partial honest cloud architecture, system follows the protocol and standards but internal algorithms still 
have an access to critical data which should be protected and hence it violates the privacy concern of cloud 
storage. In an unregulated cloud storage model, cloud services only provide a remote access, storage and 
security and it does not compromise with data privacy protocols and standards. In the proposed research, 
existing partial honest cloud architecture is adopted and developed further [26]. 

The proposed architecture consists of four entities, which are: Data provider, two cloud servers, and 
service user. In this model, data provider is an actual owner of the original data. Service user is an entity 
looking for data from cloud storage and it is also an authorised entity. In the proposed architecture secure 2 
party computational protocols is used. It is used for secure computations between two cloud servers. The 
workflow of the proposed system architecture is as below. Initially data provider generates a secret and 
public key using Elgamal encryption algorithm. Once key generation is completed, data provider sends a 
generated public key and encrypted datasets to first server [27]-[29]. After this, data provider provides an 
elgamal public-private key to the second cloud server; parallelly it sends a generated public key to the service 
user. After the sharing of key pairs and encrypted data, service users make a request in the form of encrypted 
query and send it to first server. Secure plain-text equality test is used in the proposed architecture to check if 
two encrypted datasets are equal or not without actually decrypting it. Using the secure 2 party computational 
protocol, two cloud servers collaborate together and the first server performs apriori algorithm using secure 
plain-text equality test [30], [31]. Figure 1 illustrates the proposed cloud system architecture. 
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Requested 


Encrypted Data Query 


Secure NZ 
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Computation Public Key 
Public Protocol 
Key 


; Result 
Secret Key mecret hey Public Result 
Key Data from Server 1 


Server 2 


Figure 1. Proposed cloud system architecture 


Now apriori algorithm and Elgamal encryption algorithm steps are explained. They are used for 
enhancement in privacy preservation in cloud computing. Figure 2 explained the flow chart of the apriori 
algorithm and Elgamal encryption algorithm. 


2.1. Secure plain-text equality test 

Secure plain-text equality test algorithm returns values based on the input comparison. The output 
value could either be true or false. It returns true if two plain-text values are identical and false if it is not. 
This section represents the secure plain-text equality test algorithm used in this architecture. Input of the 
algorithm is two cipher texts (input 1 and input 2) and the output is either true or false. Initially, server 1 
(ES1) generates a composite number t, and sends inputl(t) to server 2(ES2). Using the composite number 
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input! (t), input2 (t) and both cipher inputs, using this value the front of S1 (t* inputl) & S2 (t* input2) is 
generated and it is represented as g"! and g” respectively. This data is then transferred to Server 2. Using the 
secret key on g"! and g Server 2 generates output g"* and g'* where x is a secret key provided by data 
provider after key generation phase. These values are then transferred to server 1, where they generate an 
output (a) of an algorithm using t, g"* and g™*. Output of this step is either true or false which defines 
whether two cipher-texts are similar or not. Figure 3 explained the flow chart for the secure plain-text 
equality test algorithm. 
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Figure 2. Flow chart of the apriori algorithm and elgamal encryption algorithm 


In this research, a privacy preservation in cloud computing using apriori algorithm and secure plain-text 
equality test algorithms is proposed. The proposed algorithm consists of two important steps which are 
generation of candidate set and calculation of frequency set. 


Algorithm 1: 
: Server 2 generate a composite number 
Server 2 send Encrypted composite number to server 1 
: Compute grl and gr2 and send to server 2 
Server 2 Compute xx using secret key and send to server 1 
: Calculate 
If equals 1 

return true 
7: Else 

return false 

Input: Encrypted Text 1 and Encrypted Text 2 
Output: Boolean 
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Figure 3. Flow chart of the secure plain-text equality test algorithm 


2.2. Generation of candidate set 

In this step, a candidate set is generated. In each candidate set, multiple patterns are present. Also, 
each pattern consists of multiple items. Candidate set generation involves the following steps. Initially a 
single pair of patterns is selected from k-1 frequent dataset. Considering the selected pair of patterns is <p1, 
p2>. In this equation pl and p2 are different selected patterns. After this step, a join is performed between 
items of pattern 1 and pattern 2. The result of this join is added to the candidate set. It is indicated as Sx 
where k is the number of items. After this join is performed on all pair of excluding items of pattern 1 and 
pattern 2 and resultant set Sx is transferred to cloud server 1. 


2.3. Calculation of frequent set 

In this step, a frequency set of candidates set (Sx) is calculated. Algorithm 2 illustrates the pseudo 
code for the calculation of frequency set. Initially, one pattern from candidate set is selected. After this, 
secure plain-text equality test is carried out for all items belonging to the transaction or belonging to selected 
pattern. If this test returns true value then the matched item count is increased by one. Using mathematical 
functions and arbitory integer value (g), E(x.sup) and E(g™"P) are calculated. If the value of secure plain- 
text equality test is true, then frequent attributes of x are added into the frequent set. The same pseudo code is 
used to find the frequent set for other patterns of candidate set. 


Algorithm 2: 
1: Calculate frequency set 
2: Selected one pattern 
3: Secure plain-text equality test 
4: If test 
return true 
5: Increment i value by 1 


2.4. Proposed apriori algorithm 

Algorithm 3 represents the Proposed apriori Algorithm. Initially the L1 is set to single item set 
which is received from the data owner. In next step, generation of candidate set algorithm is used, candidate 
set is generated and later algorithm 2 is used, frequency set of candidate set is calculated. In this stage, if 
there is no generation of k frequent set then k-1 frequent set is returned, where k is a length of itemset. Figure 
4 explained the flow chart for the apriori algorithm (PA). 
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Figure 4. Flow chart for the apriori algorithm 


Algorithm 3: 
1: Receive Frequency item set from data owner 
2: Initialize variable i with 2 
3: while (true) 
4: var = generate candidate set 
5: if (var == null) 
return encrypted frequency set to service user 
6: calculate frequency set 
7: Increment i value by 1 
8: end while 


3. RESULTS AND DISCUSSION 
3.1. Security analysis 

To determine the security vulnerability of the proposed algorithm, security proof analysis is 
performed. With respect to first cloud server, data frequency is present in the encrypted format and the 
database present in this server is also in encrypted format. As the proposed Elgamal encryption algorithm 
provides different encrypted data for the same plain text data after every encryption process, there is 
guarantee of no leakage of data. With respect to second cloud server, as the original data doesn’t contain the 
front of cipher text, there are no chances of data exposure from second cloud server. This shows that the 
proposed algorithm maintains the partial honest standard of cloud computing infrastructure. 


3.2. Performance evaluation 

For evaluation of performance analysis of the proposed secure ARM is carried out. For the 
evaluation purpose, windows operating system is used. For avoiding any CPU overhead and deadlock issue 
32 GB of DDR 4 RAM is configured. Intel Xeon E3-1220 processor is used. For the generation of big integer 
GMP (GNU Multiple Precision Arithmetic Library) library with 6.2.1 version is used. GMP is a free 
arithmetic library that works with signed integers, rational numbers, and floating-point numbers with variable 
precision. Xun also suggested a data privacy ARM, rely on the k anonymity which focuses on the encrypted 
dataset as well as query encryption [11]. Hence the proposed algorithm is the comparison with the algorithm 
that has been proposed by Xun. For performance analysis a database which is selected for the is based on 
retail data [27]. Table 1 show system information. 


Table 1. System configuration 


Operating system Windows 10 
RAM 32 GB DDR 4 
Processor Intel Xeon E3-1220 
Library GMP 
Library version 6.2.1 


In this analysis the number of data is also varied to get the broader performance overview. 
The minimum support is also varied for carrying performance evaluation at different minimum support value 
ranging from 5% to 30%. For the evaluation with respect to data size, count of data varies from 2,000; 4,000; 
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6,000; 8,000 and 10,000. To determine the impact of fake transactions, fake transaction ratio is differentiated 
from 50% and 100%. Key size for advanced encryption algorithm is 1,024. Table 2 explained details of the 
analysis evaluation of performance for the secure association rule mining. 


Table 2. Analysis evaluation of performance for the secure association rule mining 
Key size (advanced 


encryption algorithm) 
5% ———> 30% 2,000; 4,000; 6,000; 8,000; and 10,000 50% and 100% 1,024 


Minimum support (data size) | Count of data (impact of fake transcations) Fake transaction ratio 


Figure 5 illustrates the comparison of the proposed algorithm with the data privacy association rule 
mining. With fake transaction ratio of 50% and minimum support of 10%, the proposed algorithm shows 
205% improvement as compared to data privacy association rule mining. With fake transaction ratio of 100% 
and minimum support of 10%, the proposed algorithm shows 405% improvement as compared to data 
privacy association rule mining. This result shows that the proposed algorithm does not require fake 
transactions like data privacy association rule mining. It also shows that the proposed algorithm doesn’t 
require binary operation as secure plain-text equality test is implemented. Where the result in Table 3 
explained details of the improvement proposed algorithm as compared to data privacy association rule 
mining (ARM). 
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Figure 5. Evaluation using different count of data 


Table 3. Improvement privacy association rule mining (ARM) 
Fake transaction ratio Minimum support Improvement proposed algorithm 
50% 10% 205% 
100% 10% 405% 


Figure 6 illustrates the comparison of the proposed algorithm with the data privacy association rule 
mining with respect to various minimum support values. With count of data as 10,000 and fake transaction 
ratio of 50%, the proposed algorithm shows 216% improvement compared to data privacy association rule 
mining. With count of data as 10,000 and fake transaction ratio of 100%, the proposed algorithm shows 
429% improvement compared to data privacy association rule mining. This result shows that the proposed 
algorithm does not require fake transaction like data privacy association rule mining. 

Where the result in Table 4 explained details of the improvement proposed algorithm as compared 
to data privacy ARM. Table 5 shows algorithms and methods that were uitilized in the previous works. In 
terms of comparison, the performance analysis is noticed of privacy preservation in cloud computing 
uitlizing apriori algorithm (PA) more effective. 
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Figure 6. Evaluation using different minimum support value 
Table 4. Improvement privacy association rule mining (ARM) 
Count of Data (impact of fake transcations) Fake transaction ratio Improvement proposed algorithm 
10000 50% 216% 
10000 100% 429% 
Table 5. Illustrates a comparison of previous systems 
Ref Author year Algorithm/ method 
[2] X.Yi, et al. 2015 associate rule mining based on k anonymity and elagmal cryptography technique 
[11 F. Giannotti, et al. 2018 k anonymity-based association rule mining algorithm 
[12] M.Saravanan 2018 association rule mining (ARM), Rob frugal algorithm 
[13] T.N. Jabeen et al. 2016 ISARM (Improved Secured Association Rule Mining) 
UA V. Kumar etal. 2021 DM techniques in cloud computing and data security 
[15 Dr.S.Priyadarsini, etal 2016 Apriori formula (FP Growth) 
[16] T.H. Duc 2021 association rule mining to classification to clustering, 
[17] M.N. Lakshmi et al. 2012 uses a sign-rely secure sum cryptography approach to find global association rules (GAR) 
[18] H. Khurana et al. 2014 Apriori algorithm (FP Growth) 
[19] V.R. Redekar et al. 2014 association rule mining 
[20] K. Gai, et al. 2017 Dynamic Data Encryption Strategy (D2ES) for privacy importance of big data (BD) and 
take up cloud computing (CC) implementations 
[21] J. Park, et al. 2020 SCC-PPRL algorithm using FHE scheme 
[22] A.S. Rajput et al. 2019 logistic-tent system and ElGamal cryptosystem 
[23] Z. Zhou, et al. 2014 association among the keywords and data files rely Galois connection (GC), variable 
threshold fuzzy concept lattice 
[24 H. Rong, et al. 2016 _ k-nearest neighbor (kNN) 


4. CONCLUSION 

Cloud computing is emerging as in primary data storage for individual as well as organisations, 
privacy preservation is an also important aspect of cloud computing. In this research an apriori algorithm is 
proposed to enhance the privacy of encrypted data. The proposed algorithm is integrated with elgamal 
cryptography and it does not require fake transactions. The proposed secure plain-text equality test-based 
algorithm improves the data protection as well as query privacy and it hides the data frequency. It was 
observed that the proposed algorithm shows 3 to 5% improvement in performance when compared to other 
existing algorithms. This performance analysis with varying count of data and fake transactions shows that 
proposed algorithm doesn’t require fake transaction like data privacy association rule mining. It also shows 
that the proposed algorithm doesn’t require binary operation as secure plain-text equality test is implemented. 
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